$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft File: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft (raw, json) Hash identifier: XGUYX9hUhVb1hU0BfGGUQ8vVD4umou5JRungNENMwHs= Subject key identifier: 0C:9D:58:AE:C1:E5:61:43:48:A5:84:69:90:8D:DA:EA:76:4B:05:BC Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F Certificate issuer: /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F Certificate serial: 7796B5D80BAAD361EABAC9DC10B2F799EAFE2A16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft Manifest number: 0295 Signing time: Tue 05 Aug 2025 18:54:10 +0000 Manifest this update: Tue 05 Aug 2025 18:49:10 +0000 Manifest next update: Wed 06 Aug 2025 21:23:10 +0000 Files and hashes: 1: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl (hash: hRAPgBJHe/5FF1y3nhgvC4RLTgZjqc35pPFDrm43bJ4=) 2: 323830343a313838303a3a2f33322d3438203d3e203631393336.roa (hash: fNkBrLz/jvFOQO/KxVfV9h3dG8yXI+1zaqYHBVObJmU=) 3: 3230312e3135382e382e302f32322d3332203d3e203631393336.roa (hash: gjYVPcXMhZ7qu+6OU6EWL5nbz/3oRa7kcaOYjRDvHx8=) 4: 3230312e3135382e31322e302f32322d3332203d3e203631393336.roa (hash: 6R4AlcJOqeq8gfEUoLNsu28aKDDxhWH6o37EplyNWLc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 21:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:96:b5:d8:0b:aa:d3:61:ea:ba:c9:dc:10:b2:f7:99:ea:fe:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F Validity Not Before: Aug 5 18:49:10 2025 GMT Not After : Aug 6 21:23:10 2025 GMT Subject: CN=0C9D58AEC1E5614348A58469908DDAEA764B05BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:b6:fa:34:35:d3:2f:bc:b7:4b:9e:61:29: 0a:df:70:cb:6d:0d:38:11:da:86:b6:fc:84:80:03: 12:e9:46:6b:42:1f:ba:ba:0f:bb:a0:37:25:8e:f4: a0:73:9f:3c:f8:4c:b6:1e:40:05:bd:c6:c7:f3:a3: d3:5d:45:55:c3:3e:2c:e2:d2:b4:9c:79:bc:03:05: 64:cf:8d:5a:de:1c:ba:b3:13:83:8e:fb:87:16:1a: 28:f9:65:7c:e4:29:36:c3:43:a2:34:8e:4e:76:50: 49:d6:69:f4:2b:30:34:5b:ba:fd:ff:19:fc:6e:04: bb:fd:ee:12:e3:b1:91:cd:84:3a:b0:06:da:b3:f8: a6:2e:c2:cb:77:54:b0:3c:d6:58:07:dc:2b:fb:f2: 01:82:b9:cb:07:37:56:2e:a4:1e:33:6e:aa:d7:0a: 93:86:16:dc:ba:07:53:15:9e:6b:42:f6:1c:22:20: 53:3b:b0:43:03:9d:a9:e8:12:81:b2:7a:61:20:48: 1b:e4:31:fb:1a:aa:a7:de:18:d0:6f:ff:c5:50:2a: d3:91:90:0b:bd:ab:28:8f:72:39:72:cb:1b:c7:d4: bb:70:47:9f:57:1b:3e:7c:83:bb:24:33:8d:f9:b0: 46:e7:b3:dc:84:29:d9:6b:18:04:68:ab:c6:ed:e0: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:58:AE:C1:E5:61:43:48:A5:84:69:90:8D:DA:EA:76:4B:05:BC X509v3 Authority Key Identifier: keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fb:ce:0d:c5:a2:c4:6d:8b:ce:4b:95:00:88:1b:a6:23:a2: 7f:3c:95:ed:16:c4:cf:05:d4:12:a1:78:6c:e2:c7:b5:42:47: 13:d8:1d:08:ba:05:45:84:58:c7:fe:4f:54:0b:5d:7e:87:30: 86:3a:33:31:3d:4b:d4:f1:d3:a4:cd:4a:6f:ed:c0:95:25:21: 57:ae:85:66:a3:7f:f1:4f:80:23:ea:97:68:c9:c9:59:1d:4a: 9d:09:5b:16:94:9b:4a:7f:58:50:cd:8a:b2:f0:28:04:5c:3b: 8f:aa:e3:f9:79:21:10:03:fd:37:b2:50:70:1f:5c:c0:07:ce: 66:34:ea:19:ae:36:60:fe:14:b4:3c:11:c0:88:1b:0c:90:01: 38:8a:aa:86:f7:5a:2e:3b:2b:17:b7:06:13:03:94:b3:a4:dc: 21:b8:c2:89:a6:26:66:47:9e:7b:06:d1:6f:78:cf:ff:0c:dd: 7c:61:8e:b2:26:dc:17:97:86:31:5e:1e:a0:6f:18:ac:7a:47: 5f:db:2b:72:52:30:a4:d1:33:7c:a5:6a:e1:e8:0c:cb:26:7e: a5:b2:a0:2a:08:94:6b:00:2c:88:00:05:b6:50:c3:a7:0e:a1: 51:ee:d6:92:4a:ab:b1:27:a8:0e:ba:1f:19:7c:f9:77:b1:f7: 1d:47:f4:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd5a12Auq02HqusncELL3mer+KhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQwMzA2QzIzRkY1NjRBRjU0Qjc5RDhGOThEMERDRERD OTMwQjIxRjAeFw0yNTA4MDUxODQ5MTBaFw0yNTA4MDYyMTIzMTBaMDMxMTAvBgNV BAMTKDBDOUQ1OEFFQzFFNTYxNDM0OEE1ODQ2OTkwOEREQUVBNzY0QjA1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYrb6NDXTL7y3S55hKQrfcMtt DTgR2oa2/ISAAxLpRmtCH7q6D7ugNyWO9KBznzz4TLYeQAW9xsfzo9NdRVXDPizi 0rScebwDBWTPjVreHLqzE4OO+4cWGij5ZXzkKTbDQ6I0jk52UEnWafQrMDRbuv3/ GfxuBLv97hLjsZHNhDqwBtqz+KYuwst3VLA81lgH3Cv78gGCucsHN1YupB4zbqrX CpOGFty6B1MVnmtC9hwiIFM7sEMDnanoEoGyemEgSBvkMfsaqqfeGNBv/8VQKtOR kAu9qyiPcjlyyxvH1LtwR59XGz58g7skM435sEbns9yEKdlrGARoq8bt4BwrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDJ1YrsHlYUNIpYRpkI3a6nZLBbwwHwYDVR0j BBgwFoAUjQMGwj/1ZK9Ut52PmNDc3ckwsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhG TU4vMC84RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMDMwNkMyM0ZGNTY0QUY1 NEI3OUQ4Rjk4RDBEQ0REQzkzMEIyMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhGTU4vMC84 RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcvvODcWixG2LzkuVAIgbpiOifzyV7RbEzwXUEqF4bOLHtUJHE9gdCLoFRYRY x/5PVAtdfocwhjozMT1L1PHTpM1Kb+3AlSUhV66FZqN/8U+AI+qXaMnJWR1KnQlb FpSbSn9YUM2KsvAoBFw7j6rj+XkhEAP9N7JQcB9cwAfOZjTqGa42YP4UtDwRwIgb DJABOIqqhvdaLjsrF7cGEwOUs6TcIbjCiaYmZkeeewbRb3jP/wzdfGGOsibcF5eG MV4eoG8YrHpHX9srclIwpNEzfKVq4egMyyZ+pbKgKgiUawAsiAAFtlDDpw6hUe7W kkqrsSeoDrofGXz5d7H3HUf02A== -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:41 2025 by rpki-client